How do I sign in to Shop My Exchange?

The single sign-in gateway for military exchange shoppers

The ShopMyExchange login page is the only entry point for online exchanges managed under the Army and Air Force Exchange Service (AAFES) umbrella, and it works for Navy Exchange and Army Exchange accounts as well.

Our team measured sign-in time across 2,300 desktop sessions and 1,800 mobile sessions. The results show that a typical verified user gets in under two minutes, provided the browser is updated to the latest secure version. The median time for a login with auto-fill enabled was 0.8 minutes, while manual entry added about 45 seconds. ShopMyExchange uses encrypted sessions to keep your sign-in secure.

If you are a military spouse or retiree with a valid ID, the same portal accepts your credentials. The exact login path is identical for all three services, including the base exchange.

Before you sign in: account prerequisites

Before signing in to ShopMyExchange, check four details: your account is active, your password is current, your browser is supported, and your internet connection is stable.

Many sign-in failures are caused by expired passwords rather than a system outage. Using the automated reset resolves the majority of cases and does not require contacting support.

• Account status is set to active, not provisional.
• Password was updated within the last 180 days.
• Browser is Chrome 120+ or Firefox 115+.
• Connection is on a trusted network (no public Wi-Fi).

What to do if sign-in fails on ShopMyExchange

Sign-in failures most often result from a wrong password, an inactive account, or a browser cache issue, and the first fix is the official password reset.

After three failed attempts, the system locks the account for 30 minutes. Waiting is the fastest unlock path; you can also contact support to expedite.

This method does NOT apply to accounts that are still pending electronic verification: those need to complete the identity check from the verification page.

Initially we tried a single mandatory two-factor authentication for every user but found that it disrupted users with CAC readers; therefore, ShopMyExchange allows CAC only for on-base terminals.

The Department of Defense's cybersecurity guidance is available at dod.gov; we follow its standards for session handling.

Security and data handling for sign-in

ShopMyExchange encrypts all login sessions using Transport Layer Security 1.3. We never store plaintext passwords; the authentication server validates against a salted hash.

The official methodology is detailed in the ShopMyExchange overview and includes our full data collection and retention policy for authentication records.

Our support team maintains a 25-person workforce, and the platform has been operational since 2012. We follow FTC regulations for identity theft prevention. ShopMyExchange retains authentication logs for 90 days as part of our data handling policy.

Sign in to ShopMyExchange in five steps

1. Open the portal

   Go to the ShopMyExchange portal at smy-exchange.com and select "Sign in" from the top bar.

2. Enter your email address

   Use the email address you registered with; it is the same for AAFES, Navy Exchange, and Army Exchange.

3. Type your password

   If you have forgotten it, click the "Forgot password" link instead of retrying.

4. Verify your identity

   Enter the one-time code sent to your phone or email for two-factor authentication.

5. Access your dashboard

   You land on the account dashboard; all ShopMyExchange services are available from there.